LONDON (IT BOLTWISE) – Angreifer nutzen offenbar eine Kette aus vier Plex-Softwarelücken („Plex2Shell“), um ohne Authentifizierung Code auszuführen und zusätzliche Payloads nachzuladen. Laut Sicherheitsangaben kam es dabei in freier Wildbahn zu Deployments eines Miner-Programms sowie zu einer Linux-Backdoor mit Reverse-Proxy-Funktion. Die Lücken... Weiterlesen: Plex2Shell: Kettenlücke ermöglicht Miner- und Linux-Proxy-Backdoor
Intelligence View
⚡ tsecurity.de Intelligence
Plex2Shell: Kettenlücke ermöglicht Miner- und Linux-Proxy-Backdoor
LONDON (IT BOLTWISE) – Angreifer nutzen offenbar eine Kette aus vier Plex-Softwarelücken („Plex2Shell“), um ohne Authentifizierung Code auszuführen und zusätzl…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
This story across other sources
Related story clusters & sources (vector AI)
29 sources
CVE-2024-26726 | Linux Kernel up to 6.1.78/6.6.17/6.7.5 btrfs_get_extent memory leak (Nessus ID 265954 / WID-SEC-2024-0773)
28 more sources
VVulDB Updates1 hour agoCVE-2024-26727 | Linux Kernel up to 6.7.5 on ASSERT fs/btrfs/disk-io.c allocation of resources (WID-SEC-2024-0773) VVulDB Updates1 hour agoCVE-2024-26729 | Linux Kernel up to 6.7.6 display dc_dmub_srv_cmd_list_queue_execute dc_dmub_srv null pointer dereference (351080ba3414/d2b48f340d9e / WID-SEC-2024-0773) VVulDB Updates1 hour agoCVE-2024-26731 | Linux Kernel up to 6.1.79/6.6.18/6.7.6 sk_psock_verdict_data_ready null pointer dereference (Nessus ID 212350 / WID-SEC-2024-0773) VVulDB Updates1 hour agoCVE-2024-26732 | Linux Kernel up to 6.7.6 skb_consume_udp deadlock (897f75e2cde8/56667da7399e / Nessus ID 250012) VVulDB Updates1 hour agoCVE-2024-26733 | Linux Kernel up to 6.7.6 arp_req_get buffer overflow (Nessus ID 207818 / WID-SEC-2024-0773) VVulDB Updates1 hour agoCVE-2024-26735 | Linux Kernel up to 6.7.6 ipv6 use after free (Nessus ID 207884 / WID-SEC-2024-0773)
+22
15 sources
CVE-2026-6930 | IBM Concert up to 3.0.0 inadequate encryption (EUVD-2026-104488)
14 more sources
VVulDB Updates2 hours agoCVE-2026-15661 | IBM Concert up to 3.0.0 (EUVD-2026-104487) VVulDB Updates2 hours agoCVE-2026-111061 | Eugeny russh up to 0.64.0 SSH Agent allocation of resources (EUVD-2026-104457) VVulDB Updates2 hours agoCVE-2026-111750 | aio-libs aiohttp up to 3.14.3 Pure Python Parser input validation (EUVD-2026-104486) VVulDB Updates2 hours agoCVE-2026-111749 | aio-libs aiohttp up to 3.14.3 information disclosure (EUVD-2026-104485) VVulDB Updates2 hours agoCVE-2026-12727 | IBM MQ Operator/MQ Advanced container images off-by-one (EUVD-2026-104463) VVulDB Updates4 hours agoCVE-2026-111058 | mljar Mercury up to 3.2.5 WebSocket Wrapper /api/kernels improper authorization (EUVD-2026-104420)
+8
7 sources
CVE-2022-47088 | GPAC 2.1-DEV-rev574-g9d5bb184b MP4box buffer overflow (Issue 2340 / EUVD-2022-49864)
6 more sources
VVulDB Updates2 hours agoCVE-2022-47089 | GPAC 2.1-DEV-rev574-g9d5bb184b MP4box media_tools/av_parsers.c gf_vvc_read_sps_bs_internal buffer overflow (Issue 2338 / EUVD-2022-49865) VVulDB Updates2 hours agoCVE-2022-47091 | GPAC 2.1-DEV-rev574-g9d5bb184b MP4box filters/load_text.c gf_text_process_sub buffer overflow (Issue 2343 / EUVD-2022-49867) VVulDB Updates2 hours agoCVE-2022-47093 | GPAC 2.1-DEV-rev574-g9d5bb184b MP4box filters/dmx_m2ts.c m2tsdmx_declare_pid use after free (Issue 2344 / EUVD-2022-49869) VVulDB Updates2 hours agoCVE-2022-47092 | GPAC 2.1-DEV-rev574-g9d5bb184b MP4box media_tools/av_parsers.c gf_hevc_read_sps_bs_internal integer overflow (Issue 2347 / EUVD-2022-49868) VVulDB Updates2 hours agoCVE-2022-47094 | GPAC 2.1-DEV-rev574-g9d5bb184b MP4box filters/dmx_m2ts.c m2tsdmx_declare_pid null pointer dereference (Issue 2345 / EUVD-2022-49870) VVulDB Updates2 hours agoCVE-2022-47095 | GPAC 2.1-DEV-rev574-g9d5bb184b MP4box media_tools/av_parsers.c hevc_parse_vps_extension buffer overflow (Issue 2346 / EUVD-2022-49871)
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4283164/cyber-security-bulletins/plex2shell-kettenluecke-ermoeglicht-miner-und-linux-proxy-backdoor/